Certificate 1: 
Version: 3 (0x2) 
Serial Number: 54:04:7b:af:46:99:77:53:03:1£51:01:95:24:57:36 
Signature Algorithm: shal WithRSAEncryption 
Issuer: C=VN, O=FPT Corporation, OU=FPT Information System, CN=FPT Certification Authority 
Validity 
Not Before: Oct 3 03:52:00 2016 GMT 
Not After : Aug 17 17:00:00 2018 GMT 
Subject: CN=Téng Cyc Thué, O-MST:0100231226, L=2, CNN 
Subject Public Key Info: 
Public Key Algorithm: rsaEncryption 
Public-Key: (1024 bit) 
Modulus: 
00:9a:42:71:66:96:4f:b 1 :49:3e:28:5b:c2:ad:3d: 
aa:db:a9:4c:e3:1d:d7:4b:f9:38:07:b2:76:5d:30: 
15:11:76:f6:85:30:97:21:05:82:c1:d2:41:9e:5a: 
b5:bc:78:b1:39:40:71:a4:e0:5a:c6:c1:b0:4e:b4: 
a5:74:ee:ba:d5:fb:c8:1b:4c:dd:b0:c9:e3:fa:b6: 
b5:15:d8:cf:ae:7d:f4:d6:ab:62:74:1£:3b:a5:e4: 
a7:6d:49:6d:ec:21:cc:20:7e:98:89:5c:13:e2:c6: 
1e:4a:91:96:44:68:10:68:0d:b8:24:53:b9:ea:82: 
f6:9b:5a:34:fd:fc:53:29:df 
Exponent: 65537 (0x10001) 
X509v3 extensions: 
Authority Information Access: 
CA Issuers - URI:http://public.rootca.gov.vn/crt/micnrca.crt 
CA Issuers - URI:http://www.fis.com.vn/crt/fptca.crt 
OCSP - URI:http://ocsp.fis.com.vn 
X509v3 Subject Key Identifier: CF:FB:8E:ED:C6:31:75:DD:E8:86:CD:D8:28:90:FF:63:A2:8E:6D:95 
X509v3 Basic Constraints: critical CA:FALSE 


X509v3 Authority Key Identifier: 
keyid:B3:DE:71:92:1C:45:1D:C9:9B:4F:F7:17:95:53:CE:A2:4D:EB:59:32 


X509v3 Certificate Policies: 
Policy: 1.3.6.1.4.1.30339.1.4.1.6 


X509v3 CRL Distribution Points: critical 


Full Name: URI:http://crl.fis.com.vn/get 


X509v3 Key Usage: critical 
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate 
Sign, CRL Sign 


X509v3 Extended Key Usage: critical 


TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, E-mail Protection, 
1.3.6.1.5.5.7.3.15, 1.3.6.1.5.5.7.3.16, 1.3.6.1.5.5.7.3.17, Microsoft Smartcardlogin, 1.3.6.1.4.1.311.10.3.12 


Signature Algorithm: shal WithRSAEncryption 


40:b1:02:06:d3:7b:9a:27:90:e0:bb:94:6b:ad:76:80:2a:26: 
4a:d5:a3:8e:c8:38:e1:51:3e:aa:24:99:8b:8£:99:62:35:43: 
4f:38:47:db:37:83:c3:92:e1:e9:97:4c:f0:14:7e:4¢:85: ff: 
64:64:77:eb:3 1:98:a9:0d:2f:d2:e7:28:ab:d1:43:bd:4d:73: 
0b:c9:53:9£cb:f5:ac:1c:0c:a5:d5:00:74:e1:8a:38:5b:7a: 
44:83:20:c2:ec:d0:0f:c2:5a:a0:a9:4c:7f:66:85:a7:ef:86: 
de:a3:bce:f3:4c:9¢:8b:25:0e:d4:ad:b2:9a:02:1¢:15:39:40: 
54:af:2c:b3:69:54:0e:28:37:86:b6:70:84:29:69:00:39:67: 
35:51:e1:f£c5:59:c4:d8:71:0b:0c:0c:27:79:77:70:cc:63: 
8f:77:10:c5:e0:08:83:c9:43 :9f:62:bd:ed:99:cd:0d:5f:44: 
cf:cb:ca:3e:0a:43 :bf:6f:54:cf:86:22:08:6e:la:5f:al:2b: 
36:18:8£81:d1:14:b9:f£:5a:40:7c:d5:a7:43:7a:58:08:61: 
ab:90:94:12:21:7f:e5:e8:5e:44:71:65:64:f£:82:96:85:99: 
b1:8d:c2:38:f9:f7:ea:9a:57:4b:fc:24:5a:b9:a8:ec:49:a5: 
78:50:d0:28 


MHEfzCCA2egAwIBAglQVAR7r0aZd1 MDH1EBISRXNjANBgkghkiG9wOBAQUFADBu 
MQswCQYDVQQGEwJWTjEYMBYGAIUEChMPRIBUIENvenBvemF0aW9uMR8wHQYDVQQL 
ExZGUFQgS WSmb3JtY XRpb24gU3lzdGVtMSQwIgY DVQQDExtGUFQgQ2VydGlmaWNh 
dGlvbiBBdXRob3JpdHkwHhcNMTYxMDAzZMDM1MjAwWhcNMTgwODE3MTcwMDAwWjBQ 
MRwwGgYDVQQDDBNU4buVbmcgQ+G7pWMgVGh14bq/MRcwFQYDVQQKDASNUIQ6MDEw 
MDIzMTIyNjJEKMAgGA1UEBwwBMjELMAkGA1UEBhMCVk4wgZ8wDQYJKoZIhvcNAQEB 
BQADgYOAMIGJAoGBAJpCcWaWT7FJPihbwq09qtupTOMd10v5OAeydlOwFRF290Uw 
lyEFgsHSQZ5atbx4sTIAcaTgWsbBsE60pXTuutX7yBtM3bDJ4/q2tR XY z6599Nar 

YnQfO6Xkp2 1JbewhzKB+mllc8+LGHkqRIkRoEGgNuKR TueqC9ptaNP38UynfA gMB 
AAGjggGSMIUBtTCBngYIKwY BBQUHAQEEgZEwgY4wNwYIKwYBBQUHMAKGK2h0dHA6 
Ly9wdWJsaW Mucm9vdGNhLmdvdi52bi9jcnQvbWljbnJj YS5jcnQWwLWwYIKwYBBQUH 
MAKGI2h0dHA6Ly93d3cuZmlzLmNvbS52b19jcnQvZnBOY2EuY 3JOMCIGCCsGAQUF 
BzABhhZodHRwOi8vb2NzcCSmaXMuY 29tLnZuMBOGA 1 UdDgQWBBTP+47txjF 13eiG 
zdgokP9jooStITAMBgNVHRMBAf8EAjJAAMB8GA | UdlwQYMBaAFLPecZIcRR3Jm0/3 
F5VTzqJN61kyMBkGA1UdIAQSMBAwDgYMKwY BBAGB7QMBBAEGMC0GA1UdHwEB/wQ} 
MCEwH6AdoBuGGWh0dHA6Ly9jcmwuZmlzLmNvbS52bi9nZX QwDgYDVROPAQH/BAQD 
AgH+MGoGA1UdJQEB/wRgMF4GCCsGAQUFBwMBBggrBgEFBQcDAg YIKwY BBQUHAWMG 
CCsGAQUFBwMEBggrBgEFBQcDDwYIKwYBBQUHAxAGCCsGAQUFBwMRBgorBgEEAYI3 
FAICBgorBgEEA YI3Cg¢MMMA0GCSqGSIb3 DQEBBQUAA4IBAQBAsQIGO3uaJSDgu5Rr 
rXxaAKiZK laOOyDjhUT6qJJmLj5lINUNPOEfbN4PDkuHpl0zwFH5 Mhf9kZHfrM Zip 
DS/SSyirQUO9TXMLyVOfy/WsHAylI QB04YoA4W3pEgyDC7NAPwlqgqUx/ZoWn74be 


o7zzIJyLJQ7UrbKaAhwVOUBUryyzaVQOKDeGtnyEK WkAOWc1UeH/x VnE2HELDAwn 
eXd8zGOPdxDF4AiDyUOfYr3tmcONX0TPy80+CkO/b1TPhillbhpfoSum+I+BORS5 
/IpAfNWnQ3pYCGGIkJQSIX/IG6FS5EcW Vk/4K WhZmxjcl4+ffqmldL/CRauajsSaV4 

UNAo 


Certificate 2: 

Version: 3 (0x2) 

Serial Number: 54:04:02:dc:46:cf:72:b0:84:56:78:e1:67:5d:05:4f 

Signature Algorithm: shal WithRSAEncryption 

Issuer: C=VN, O=FPT Corporation, OU=FPT Information System, CN=FPT Certification Authority 


Validity 
Not Before: Mar 16 02:54:14 2016 GMT 
Not After : Mar 7 17:00:00 2019 GMT 


Subject: CN=Téng cuc Thué, O-MST:0100231226, L=Sô 123 Lò Duc, Hai Bà Trung, Hà Nói, CAN 
Subject Public Key Info: 


Public Key Algorithm: rsaEncryption 

Public-Key: (2048 bit) 

Modulus: 
00:af:91:c3:6d:a6:fd:db:1b:bd:5c:e5:0b:64:68: 
d8:36:92:8b:8e:ee:fd:b0:5c:6f:d8:b3:7d:06:6b: 
19:d6:47:22:51:80:ea:f9:a5:c1:1£65:39:d6:69: 
6£:27:c1:ad:93:35:33:8c:f4:74:d1:07:06:90:65: 
31:64:da:87:b9:f4:f4:b8:2a:72:cc:5d:02:29:91: 
89:fa:65:08:2b:35:3b:ea:f0:61:a3:55:17:3b:9a: 
b0:b4:b5:94:de:d5:ac:5c:47:ef:ca:28:4b:27:3c: 
f6:a6:c5:fa:99:9c:a7:a5:e0:77:af:49:5a:ce:98: 
d4:34:3f£:61:1£80:50:db:19:c3:b0:91:87:49:72: 
cc:5d:73:36:£2:26:5c:d6:ac:b6:95:db:96:fe:8b: 
fb:52:42:4d0:82:63:c3:62:6d:8a:4b:3d:21:4b:a6: 
97:33:09:e3:75:64:28:4d:98:3b:3 1:a6:21:0b:48: 
b8:0d:ec:33:d0:37:1a:49:d5:90:82:45:ee:43:42: 
£9:4b:25:da:0b:b4:20:05:2f:0e:19:d8:d4:a8:90: 
3e:3c:37:2a:29:2d:24:b9:f7:78:b3:f9:5e:37:bd: 
2b:73:3c:52:6e:13:2d:eb:60:54:9d:36:b7:69:d6: 
5b:12:61:00:bb:92:11:61:09:e8:d0:a5:d5:83:ba: 
54:3f 

Exponent: 65537 (0x10001) 


X509v3 extensions: 
Authority Information Access: 


CA Issuers - URI:http://public.rootca.gov.vn/crt/micnrca.crt 
CA Issuers - URI:http://www.fis.com.vn/crt/fptca.crt 


OCSP - URI:http://ocsp.fis.com.vn 
X509v3 Subject Key Identifier: 45:00:70:18:1E:7F:0B:4A:8C:63:58:C7:7E:39:70:03:5D:D2:03:34 
X509v3 Basic Constraints: critical CA:FALSE 


X509v3 Authority Key Identifier: 
keyid:B3:DE:71:92:1C:45:1D:C9:9B:4F:F7:17:95:53:CE:A2:4D:EB:59:32 


X509v3 Certificate Policies: 
Policy: 1.3.6.1.4.1.30339.1.4.1.6 


X509v3 CRL Distribution Points: critical 
Full Name: 
URI:http://crl.fis.com.vn/get 


X509v3 Key Usage: critical 
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate 
Sign, CRL Sign 


X509v3 Extended Key Usage: critical 
TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, E-mail Protection, 
1.3.6.1.5.5.7.3.15, 1.3.6.1.5.5.7.3.16, 1.3.6.1.5.5.7.3.17, Microsoft Smartcardlogin, 1.3.6.1.4.1.311.10.3.12 


Signature Algorithm: shal WithRSAEncryption 


57:e3:07:8c:d1:eb:44:5a:c1:b5:7f:65:3f:de:59:9a:05:dc: 
85:40:4d:e2:82:7e:89:47:14:0b:01:d7:0d:f4:90:30:51:5a: 
a5:d2:00:63:42:45:16:c6:e1:b£:8c:f4:62:32:39:13:0e:01: 
54:fa:34:07:fd:f3:67:a7:bc:13:0c:6£a1:77:08:11:36:71: 
4c:31:90:9c:7d:f3:4b:0f:09:90:73:e8:24:13:26:01:a1:20: 
0f:bf:02:53:94d:08:90:0e:b2:6e:94:ed:26:6e:41:85:62:bc: 
fe:43:ee:35:94:c7:10:39:88:3£ dd:ac:c6:09:d5:f1:f6:ed: 
90:7d:00: 1e:d3:4f:07:d9:00:91:a7:13:fa:44:a8:25:33:4d: 
82:03:96:5c:ba:23:57:b5:87:23:3a:d3:9e:f5:cc:10:55:82: 
1c:6a:8b:b1:91:45:4f:e8:89:96:a7:10:ba:9c:4£:81:af:20: 
e0:31:59:16:ab:7b:c7:65:be:27:8d:a4:65:9b:49:15:38:a4: 
88:6c:9e:0e:61:43:2e:b5:c0:6a:31:5c:18:41:48:af£:0f:c3: 
b0:10:66:ce:e4:c1:f2:24:99:4£:32:73:39:cf: 17:bb:85:10: 
46:ee:05:6e:8d:af:3c:32:d6:6a:f7:44:2a:14:7£:97:4b:47: 
c8:f9:aa:b8 


MIIFLjCCBBagAwIBAgIQVAQCS3EbDPcrCEVnjhZ1 OFTZANBgkqhkiGO9w0BAQUFADBu 
MQswCQYDVQQGEwJWTJjEYMBYGAIUEChMPRIBUIENvenBvcmF0aW9uMR8wHQYDVQQL 
ExZGUFQgSWS5mb3JtY XRpb24gU3lzdGVtMSQwIgY DVQQDExtGUFQgQ2VydGlmaWNh 
dGlvbiBBdXRob3JpdHkwHhcNMTY wMzE2MDIINDEOWhcNMTkwMzA3MTCwMDAwWJB7 
MRwwGgYDVQQDDBNU4buVbmcg Y+G7pWMgVGh14bq/MRcwFQYDVQQKDASNUIQ6MDEw 
MDIzMTIyNjJEIMDMGA1UEBwwsU800IDEyMyBMw7IgxJDDumMslIEhhaSBCw6AgVHLG 
sG5nLCBIw6AgTuG7mWkxCzAJBgNVBAYTAIZOMIIBIjANBgkqhkiGOw0BAQEFAAOC 
AQ8AMIIBCgKCAQEArSHDbab92xu9XOULZGj YNpKLju79sFxv2LN9BmsZlkciU YDq 
*taXBH2US1mlvJ8Gtk6UzjPROOQcGkGUxZNqHufTOuCpyzFO0CK ZGJ--mUIK zU76vBh 


olUXOS5qwtLWUS3tWsXEfvyihLJzz2psX6mZynpeB3r0lazpj UND9hH4BQ2xnDsJGH 
SXLMXXM728iZcl qy2lduW/ov7UkLQgmPDYm2KSz0hS6aXMwnjdWQoTZg7MaYhC0i4 
Dewz0DcaSdWQgkXuQO0L5SyXaC7QgBS80GdjUqJA+PDeqKSOkufd4s/leN70rezxS 
bhMt62BUnTa3adZbEmEAuSIRY QnoOK XVg7pUPwIDAQABo4IBuTCCAbUwgZAGCCsG 
AQUFBWEBBIGRMIGOMDcGCCsGAQUFBzAChitodHRwOi8vcHVibGljLnJvb3RjYS5n 
b3Yudm4vY3JOL21pY25yY2EuY3JOMC8GCCsGAQUFBZAChiNodHRwOi8vd3d3LmZp 
cy5jb20udm4vY3JOL2ZwdGNhLmNydDAiBggrBgEFBQcwA Y Y WaHROcDovL29jc3Au 
ZmlzLmNvbS52bjAdBgNVHQA4EFgQURQBwGBS5/CO0qM Y lHfjIwA13SAzQwDAYDVROT 
AQH/BAIwADAfBgNVHSMEGDA WgBSz3nGSHEUdyZtP9xeV U86i1TetZMjAZBgNVHSAE 
EjAQMAA4GDCSGAQQBge0DAQQBBjAtBgNVHR8BAf8EIZAhMB-*gHaAbhhlodHRwOi8v 
Y3JsLmZpcy5jb20udm4vZ2 VOMA4GA 1UdDwEB/wQEA wIB/jBqBgNVHSUBAf8SEYDBe 
BggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMDBggrBgEFBQcDBAYIK wY BBQUH 
Aw8GCCsGAQUFBwMQBggrBgEFBQcDEQYKKwYBBAGCNXxQCAgYKKwYBBAGCNwoDDDAN 
BgkqhkiG9wOBAQUFAAOCAQEA V+MHjNHrRFrBtx91P95ZmgXchUBN4oJ+iUcUCwHX 
DfSQMFFapdIA Y0JFFsbhv4z0Y;jKpEw4BV Po0B/3zZ6e8EwxvoXcIETZxTDGQnH3z 
Sw8JKHPoJBMmAaEgD78CUSOIKA6ybpTtJmSBhWK8/kPuNZTHHDmIP92sxgnV 8fbt 
kHOAHtNPB9kAkacT+kSoJTNNggOW XLoj V7WHIzrTnvXMEFWCHGgqLsZFFT+JlqcQ 
upxPga8g4DFZFqt7x2W+J42kZZtJFTikiGyeDmFDLrX AajFcGEFIrw/DsBBmzuTB 

8iSZTzJzOc8 Xu4UQRu4Fbo2vPDL WavdEKhR/l0tHyPmquA== 


Certificate 3: 

Version: 3 (0x2) 

Serial Number: 54:01:01:04:70:5a:10:27:2b:23:fa:e0:e5:af:2a:52 

Signature Algorithm: shal WithRSAEncryption 

Issuer: C=VN, O=FPT Corporation, OU=FPT Information System, CN-FPT Certification Authority 


Validity 
Not Before: Feb 22 14:56:33 2019 GMT 
Not After : Oct 21 03:44:57 2020 GMT 


Subject: CN=Téng cuc Thué, O=MST:0100231226, L=S6 123 Lo Duc, Hai Bà Trung, Hà Nói, C=VN 


Subject Public Key Info: 

Public Key Algorithm: rsaEncryption 

Public-Key: (2048 bit) 

Modulus: 
00:90:a8:3f:5c:1b:b5:09:ec:7£:43:7e:bf£:9b:df: 
fd:60:84:92:eb:d1:69:7c:5b:19:5f:d3:61:3f:0c: 
23:38:91:ba:b7:b4:94:a39:95:39:0b:cd:93:31:cd: 
95:cd:c1:7c:c3:45:7a:4b:3b:c0:dd:eb:c1:8f:9d: 
93:a8:54:06:d3:a8:e1:56:97:e8:8a:5 1:5a:25:a6: 
af:dc:e9:cc:f3:4c:83:9e:62:67:c8:45:55:00:0f: 
62:48:80:db:a7:10:26:dd:d0:cf:f7:8e:71:d6:13: 
98:c5:32:1d:ee:03:18:ab:22:fb:db:da:84:01 :b5: 
20:a6:e1:6b:74:5c:0a:1d:8b:10:a7:94:e7:06:ad: 
33:64:6e:e7:65:a4:22:1d:b4:c8:51:56:82:1b:f7: 
c5:b5:d3:36:22:15:45:1b:9f:ad:cd:e1:45:e8:5a: 


f3:1£27:75:0e:ed:b6:03:2a:03:ec:fa:e4:3e:c4: 
2c0:73:77:04:3c:b8:d9:1e:d1:2e:95:04:f1:8b:3d: 
fa:f9:67:15:87:a3:90:59:92:e8:fb:47:41:0d:7c: 
15:23:d4:db:d9:cf:f3:68:76:ca:ec:0a: 10:67:63: 
b6:88:da:e6:9e:c2:8e:d1:19:44:9£:4b:3e:e5:29: 
5f:7b:d8:c4:03:49:13:8d:7a:96:a2:6e:9e:b6:a2: 
98:85 
Exponent: 65537 (0x10001) 


X509v3 extensions: 


Authority Information Access: 
CA Issuers - URI:http://public.rootca.gov.vn/crt/micnrca.crt 
CA Issuers - URI:http://www.fis.com.vn/crt/fptca.crt 
OCSP - URI:http://ocsp.fis.com.vn 


X509v3 Subject Key Identifier: 33:6C:D7:A1:91:92:5B:6A:40:CB:3C:98:DA:45:0F:41:17:F0:61:00 
X509v3 Basic Constraints: critical CA:FALSE 


X509v3 Authority Key Identifier: 
keyid:B3:DE:71:92:1C:45:1D:C9:9B:4F:F7:17:95:53:CE:A2:4D:EB:59:32 


X509v3 Certificate Policies: 
Policy: 1.3.6.1.4.1.30339.1.4.1.6 


X509v3 CRL Distribution Points: critical 
Full Name: 
URI:http://crl.fis.com.vn/get 


X509v3 Key Usage: critical 
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate 
Sign, CRL Sign 


X509v3 Extended Key Usage: critical 


TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, E-mail Protection, 
1.3.6.1.5.5.7.3.15, 1.3.6.1.5.5.7.3.16, 1.3.6.1.5.5.7.3.17, Microsoft Smartcardlogin, 1.3.6.1.4.1.311.10.3.12 


Signature Algorithm: shal WithRSAEncryption 


3e:59:d3:83:87:7d:ad:d9:7f: 15:a2:84:14:f5:c0:89:1f:89: 
c2:28:£2:1£3:17:24:40:9d:7b:6f:3c:5a:3a:40:d9:c6:f1:52: 
32:2a:f3:1c:2d:ce:4£:91:dd:eb:d4:32:3d:32:b8:2f:d4:12: 
34:4b:20:10:b2:48:b2:f0:d5:29:5b:61:a8:9b:1c:a3:e9:f0: 
3a:ba:8c:da:ff:39:a6:b3:07:ac:ea:27:6c:62:31:3d:69:d6: 
d7:1a:98:8f:d6:69:ae:3f:d0:33:d7:21:80:06:45:4f:7b:f6: 
7d:87:a3:88:0e:64:69:eb:c0:42:7c:b7:df:f9:89:ac:6e:b6: 
b8:d2:a5:67:9d: 1a:18:1d:98:d1:ec:3c:2e:c3:2e:70:72:da: 
bb:9e:8e:5e:7d:5a:ae:69:b4:0b:41:20:aa:db:fc:b6:14:c5: 
5e:f5:2e:33:eb:a8:ee:6d:80:fb:0e:e3:8c:6e:20:96:b7:86: 


ef: 1£:ff:f6:b0:ce:34:4c:1a:76:46:a6:17:cc:fa:e7:2b:10: 
7e:46:24:28:bb:76:0b:df: fl :d2:38:b7:4a:90:a6:97:4c:46: 
£8:85:99:04:56:21:f1:51:6b:50:44:a1:7a:45:43:56:d0:8d: 
52:56:b1:ae:07:ed:9a:38:3a:00:af:ed:80:77:db:d4:6a:94: 
56:f3:e£3b 


MIIFMTCCBBmgAwIBAgIQV AEBBHBaECcil/rg5a8qUjANBgkqhkiG9w0BAQUFADBu 
MQswCQYDVQQGEwJWTjEYMBYGAIUEChMPRIBUIENvenBvemF0aW9uMR8wHQYDVQOQL 
ExZGUFQgSWS5mb3JtY XRpb24gU3lzdGVtMSQwIgY DVQQDExtGUFQgQ2VydGlmaWNh 
dGlvbiBBdXRob3JpdHkwHhcNMTkwMjlyMTQINjJMzWhcNMjAxMDIxMDMONDU3 WjB+ 
MROwWGwYDVQQDDBRU4buVbmcgIGPhu6 VjIFRodeG6vzEXMBUGA1UECgwOTVNUOJAx 
MDAyMzEyMjYxNzA1BgNVBAcMLIPDtCAgMTIzIEzDsiDEkKMO6YyAsIEhhaSBCw6Ag 
VHLGsGSnLCBIw6AgTuG7mWkxCzAJBgNVBAY TAIZOMIBIJANBgkqhkiG9w0BAQEF 
AAOCAQSAMIIBCgKCAQEAKKg/XBul Cex/Q36/m9/9YISS69F pfFsZX9NhPwwjOJG6 
t/SUqZUSC82TMc2VzcF8w0V6SzvA3evBj52TqFQGO6jhVpfoilFaJaav3OnM80yD 
nmJnyEVVAA9OiSIDbpxAm3dDP945x1hOYxTId7gMYqyL729qEAbUgpuFrdFwK HY sQ 
p5TnBq0zZG7nZaQiHbTIUVaCQG/fFtdM2Ih V FGS5-tzeFF6FrzHydl Du22AyoD7Prk 
PsQsc3cEPLjZHtEulQTxiz36-WcVh60QWZLo-*0dBDXwVI9Tb2c/zaHbK 7A0QZ202 

iNrmnsK OORIEnOs--5SIfe9jEAOKT;XqWomóetqK YhQIDAQABOo4IBuTCCAbUwgZAG 
CCsGAQUFBWEBBIGRMIGOMDcGCCsGAQUFBzAChitodHRwOi8vcH VibGljLnJvb3Rj 
YS5nb3 Yudm4vY 3JOL21pY25yY2EuY3JOMC8GCCsGAQUFBzAChiNodHRwOi8vd3d3 
LmZpcy5jb20udm4vY3JOL2ZwdGNhLmNydDAiBggrBgEFBQcwAY Y WaHROcDovL29j 
c3AuZmlzLmNvbS52bjAdBgNVHQA4EFgQUM2zXoZGSW2pAyzyY2kUPQRfwYQAwDAYD 
VROTAQH/BAIwWADAfBgNVHSMEGDA WgBSz3nGSHEUdyZtP9xeV U861TetZMjAZBgNV 
HSAEEjAQMAAGDCSGAQQBge0DAQQBBjAtBgNVHR8BAfSEIZAhMB-*gHaAbhhlodHRw 
Oi8vY3JsLmZpcy5jb20udm4vZ2 VOMA4GA 1 UdDWEB/wQEAwIB/jBqBgN VHSUBAf8E 
YDBeBggrBgEFBQcDAQYIKwYBBQUHAWIGCCsGAQUFBwMDBggrBgEFBQcDBAYIKwYB 
BQUHAw8GCCsGAQUFBwMOBggrBgEFBQcDEQYKKwYBBAGCNxQCAgYKKwYBBAGCNwoD 
DDANBgkghkiG9wOBAQUFAAOCAQEAPInT g4d9rdl/FaKEFPXAiR+Jwijy8xckQJ17 
bzxaOkDZxvFSMirzHC3OTS5Hd69QyPTK4LIQSNEsgELJIsvD VK VthqJsco*nwqrqM 
2v85prMHrOonbGIxPWnW 1xqYj9Zprj/QM9chgAZFT3v2fYejiASkaevAQny33/mJ 
rG62uNKIZ50aGB2Y0ew8LsMucHLau560 XnlarmmOCOEgqtv8thTFXvUuM--uo7m2A 
+w7jjG4glreG7x//9r DONEwadkamF 8z65 ysQfk Y KKLt2C9/x0j1385pCml0xG-IWZ 
BFYh8VFrUEShek VDVtCNUlaxreftmjg6AK/tgHfb 1 GqUVvPvOw-- 


Certificate 4: 
Version: 3 (0x2) 
Serial Number:54:01:01:04:24:97:74:5f:a5:af:8a:5 1:0d:18:17:5f 
Signature Algorithm: shal WithRSAEncryption 
Issuer: C=VN, O=FPT Corporation, OU=FPT Information System, CN=FPT Certification Authority 
Validity 
Not Before: Oct 19 10:17:45 2020 GMT 
Not After : Jun 1 11:26:15 2024 GMT 


Subject: CNN. L=S6 123 Lo Duc, Hai Bà Trung, Hà Nói, CN-Tóng cuc Thué/UID=MST:0100231226 


Subject Public Key Info: 

Public Key Algorithm: rsaEncryption 

Public-Key: (2048 bit) 

Modulus: 
00:8¢:25:08:6f:b2:d9:27:80:fb:c7:30:21:49:b2: 
26:c4:56:1c:df:d3:2e:37:c3:8a:71:4b:26:66:62: 
b1:8c:4d:5f:95:ee:f6:9£:23:4e:00:63:b8:35:5£ 
14:6a:73:07:50:33:2£26:83:60:5c:58:fd:27:83: 
8a:78:7£:55:a0:e3:99:fd:43 :77:9e:24:66:eb:al: 
76:52:65:03:94:e7:0d:3b:38:4d:9e:c0:de:c7:ef: 
f2:a5:54:f6:2d:64:3f:7b: 1 f:e5:24:0e:e7:3c:3b: 
8a:4a:48:27:19:d3:c1:ab:65:9a:74:b3:21:86:69: 
4e:a2:b2:a4:dd:81:2e:ce:c£:21:1£:39:cd:3b:34: 
le:11:1b:8e:3¢:8d:cc:c8:a0:97:c7:0c:e3:ec: 16: 
10:de:b0:91:e9:b1:dd:05:ea:70:81:59:3 1:96:60: 
9d:36:38:dc:48:66:b3 :36:33:30:bb:e8:bf:4b:a0: 
b8:d1:94:4b:a9:7a:ed:68:74:df:8e:8d:c3:a3:fe: 
15:44:6c:8f£:fe:c5:8£ fe:8f:6a:a7:92:bd:15:30: 
0a:69:ee:5a:75:40:11:8c:5a:cd:d£3b:5a:ef:24: 
3f:a5:73:c4:b8:22:8e:c1:a0:1a:50:9c:3e:ec:08: 
2c:07:65:f6:c1:bd:f8:b3:28:f£3£:de:41:bc:6e: 
cO:fl 

Exponent: 65537 (0x10001) 


X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE 


X509v3 Authority Key Identifier: 
keyid:9A:A6:11:A5:0B:0E:8C:12:2D:12:2D:F5:96:D6:E5:17:6B:20:3C:2F 
Authority Information Access: 
CA Issuers - URI:http://public.rootca.gov.vn/crt/micnrca.crt 
CA Issuers - URI:http://dichvudientu.fpt.com.vn/crt/fptca.crt 
OCSP - URI:http://ocsp2.fis.com.vn 
X509v3 Certificate Policies: 
Policy: 1.3.6.1.4.1.30339.1.4.1 
CPS: http://dichvudientu.fpt.com.vn/cps.html 


X509v3 Extended Key Usage: TLS Web Client Authentication, E-mail Protection, 1.3.6.1.4.1.311.10.3.12, 
1.2.840.113583.1.1.5 


X509v3 CRL Distribution Points: Full Name: URI:http://crl2.fis.com.vn 
X509v3 Subject Key Identifier: E8:24: AE:B8:FB:42:AD:9D:48:70:15:62:FE:89:6D:92:17:B7:90:11 


X509v3 Key Usage: critical 
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment 


Signature Algorithm: shal WithRSAEncryption 


37:48:d5:75:10:46:6£:12:7c:21:51:bc:ad:f5:da:6£:65:c4: 


71d:1d:6c:51:9b:b9:1a:31:b7:75:6£:29:3e:93:80:b8:7c:2c: 
3a:28:9f:6c:d6:c0:c0:49:3c:7e:dc:8d:bf:60:df: 51:42:34: 
07:f£40:8e:1a:01:c8:14:b0:52:c9:cf:1b:c2:8d:6d:0b:83: 
18:ec:14:be:e6:8c:97:34:03:fe:d£ 36:be:23:af: 4f: 8e:bf: 
9f:41:cffb:bc:3a:b2:d4:69:9e:df£:33:02:2a:56:cc:7f:5d: 
f0:8c:d4:ea:7e:b5:ee:3e:28:89:16:6d:bc:fb:17:3f:9c:29: 
51:00:f5:2a:3e:63:e5:2a:48:df:f5:e1:0f:12:00:ba:96:2a: 
33:d7:15:87:31:55:de:30:11:14:82:ca:21:36:0d:31:2b:f9: 
d8:1c:f5:d7:81:d5:d7:23:1a:a9:9b:7c:e1:b9:92:73:b8:fd: 
36:£3:20:c5:ba:6d:91:c6:61:20:a3:4e:89:5a:9d:ff:8e:44: 
88:51:45:36:c7:45:48:a7:c2:aa:e8:34:aa:20:e0:3d:8a:c8: 
da:8b:2e:2d:a9:e8:83:27:4b:a7:92:53:ae:53:ac:ec:b2:5d: 
b8:ef:79:5e:c1:6a:4£ f7:a5:9b:ba:da:d5:56:6c:fe:be:2e: 
36:e5:1£:34 


MIIFOzCCBCOgAwIBAgIQVAEBBCSXdF-Hr4pRDRgXXzANBgkqhkiG9w0BAQUFADBu 
MQswCQYDVQQGEwJWTjEYMBYGAIUEChMPRIBUIENvcnBvenF0aW9uMR8wHQYDVQQOQL 
ExZGUFQgS WSmb3JtY XRpb24gU3lzdGVtMSQwIgY DVQQDExtGUFQgQ2VydGlmaWNh 
dGlvbiBBdXRob3JpdHkwHhcNMjAxMDESMTAXNzQ1 WhcNMjQwNjAxMTEyNjE1WjCB 
gzELMAkGA 1UEBhMCVk4xNjAOBgNVBAcMLVPhuSEgMTIzIEzDsiDEKMO6Y ywgSGFp 
IELDoCBUcsawbmcsIEjDoCBO4buZaTEcMBoGA1UEAwwTVOGT7IWSnIGPhu6VjIFRo 
deG6vzEeMBwGCgmSJomT8ixkAQEMDK1TVDowMTAwMjMxMjDMIIBIjANBgkqhkiG 
9w0OBAQEFAAOCAQS8AMIIBCgKCAQEAjCUIDb7LZJAD7xzAhSbImxFY c39MuN80KcUsm 
ZmKxjE1 fle72nyNOAGO4NV8UanMHUDMVvLoPgXFj9J40KeH9 VoOOZ/UN3niRm66F2 
UmUDIOcNOzhNnsDex+/ypVT2LWQ/ex/IJA7nPDuKSkgnGdPBq2WadLOhhmlOorKk 

3Y Euzs8hHznNOzQeERuOPI3 MyKCXxwzj7B Y Q3rCR6bHdBepwgVkxlmCdNjjeSGaz 
NjMwuti/S6C40ZRLqXrtaHTfjo3Do/4 VRGyP/sWP/o9qp5K9FTAKaeSadUARjFrN 
3zta7yQ/pXPEuCKOwaAaUJw+7AgsB2X2wb34syj/P9SBVG7A8QIDAQABo4IBvTCC 
AbkwDAYDVROTAQH/BAIWADAfBgNVHSMEGDA W gBSaphGICw6MEi0SLfWW luUXayA8 
LzCBqAYIKwYBBQUHAQEEgZswgZgwNwYIKwY BBQUHMAKGK2h0dHA6Ly9wdWJsaWMu 
cm9vdGNhLmdvdi52bi9jenQvbWljbnJj YS5jcnQwOA YIKwY BBQUHMAKGLGh0dHA6 
Ly9kaWNodnVkaW VudHUuZnBOLmNvbS52bi9jcnQvZnBOY 2EuY 3JOMCMGCCsGAQUF 
BzABhhdodHRwOi8vb2NzcDIuZmlzLmNvbS52bj BPBgN VHSAESDBGMEQGCysGAQQB 
ge0DAQOBMDUwMwYIKwYBBQUHAgEWJ2h0dHA6Ly9kaWNodnVkaW VudHUuZnBOLmNv 
bS52bi9jcHMuaHRIbDAOBgNVHSUELTArBggrBgEFBQcDAgYIKwYBBQUHA wQGCisG 
AQOBgjcKAwwGCSqGSIb3LwEBBTAnBgNVHRS8EIDAeMBygGqA YhhZodHR wOi8vY3Js 
Mi5maXMuY29tLnZuMB0GA1UdDgQWBBTOoJK64-0KtnUhwFWL-1W2SF7eQETAOBgNV 
HO8BAfSEBAMCBPAwDQYJKoZIhvcNA QEFBQADggEBADdII XUQRm8SfCFRVK312m91 
xHOdbFGbuRoxt3 VVK TETgLh8LKoon2zWwMBJPH76jb9g31FCNAf/OI4aAcgUSFLJ 
zxvCjWOLgxjsFL7mjJc0A/7fNr4jr0--Ov59Bz/u8SOrLUaZ7fMwIqV sx/XfCM 1 Op+ 
te4+KIkWbbz7Fz+cK VEA9S0+Y+UqSN/14Q8SALqWKjPXFYcx Vd4wERSCyiE2DTEr 
+dgc9deB1dcjGqmbfOG5kn04/abzIM W6bZHGYSCjTolanf+ORIhRRTbHRUinwgqro 
NKqg4D2KyNqLLi2p6IMnS6eSU65TrOyyXbjve V7Bak/3pZu62tV WbP6+LjblHzQ= 


